CVE-2016-0733

Critical

Published: 12/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, allowing remote attackers to bypass authentication by leveraging knowledge of a valid username.

Risk Assessment

The organization may be exposed to unauthorized access to the system, potentially leading to data leaks or unauthorized configuration changes.

Recommendation

It is recommended to upgrade Apache Ranger to version 0.5.1 or later to secure the Admin UI against this type of attack.

Original NVD description (English source)

The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid username.